2V0-41.24 Question 124
Select 2An organization is hosting multiple tenants on an NSX-T Data Center platform. Each tenant requires isolated routing and network traffic segmentation while sharing the same physical infrastructure. How can a Tier-0 gateway be utilized to achieve multi-tenancy in this scenario?
- A
Create separate Tier-0 gateways for each tenant and assign them to different physical uplinks.
- B
Use VRF (Virtual Routing and Forwarding) instances on a single Tier-0 gateway to provide routing isolation for each tenant.
- C
Configure a separate Tier-1 gateway for each tenant and attach them to a shared Tier-0 gateway with VRF instances.
- D
Enable route advertisement on the Tier-0 gateway and redistribute all tenant routes into the same global routing table.
- E
Implement dedicated edge nodes for each tenant to ensure complete physical separation of traffic.
Show answer and explanation
Correct answers: B, C
Explanation
Multi-tenancy in a Tier-0 gateway can be achieved by leveraging VRF instances, which provide logical routing isolation for each tenant within a single Tier-0 gateway. By combining this with separate Tier-1 gateways for each tenant, organizations can ensure both isolation and scalability while using shared infrastructure. This approach aligns with best practices for NSX-T multi-tenancy designs.
- A. Incorrect.
Creating separate Tier-0 gateways for each tenant is unnecessary and does not align with the efficient use of resources in a multi-tenancy model. A single Tier-0 gateway with VRF instances provides better scalability and isolation.
- B. Correct.
VRF instances on a Tier-0 gateway allow logical routing isolation within a single gateway, making this an efficient and scalable option for multi-tenancy.
- C. Correct.
Using separate Tier-1 gateways for each tenant and connecting them to a shared Tier-0 gateway with VRF instances ensures tenant isolation while leveraging shared infrastructure efficiently.
- D. Incorrect.
Redistributing all tenant routes into the same global routing table would result in a lack of isolation, which is contrary to the requirements of multi-tenancy.
- E. Incorrect.
While dedicated edge nodes could provide physical separation, this approach is resource-intensive and unnecessary when VRF instances and Tier-1 gateways can achieve logical isolation.